Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE----- =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2001.351 -- COMPAQ SSRT0745U potential telnetd option handling vulnerability 17 August 2001 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: telnetd Vendor: Compaq Operating System: Tru64/UNIX OpenVMS Impact: None Ref: ESB-2001.312 - --------------------------BEGIN INCLUDED TEXT-------------------- - -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________ SOURCE: Compaq Computer Corporation Compaq Services Software Security Response Team USA Compaq case id SSRT0745U ref: potential telnetd option handling vulnerability x-ref: TESO Security Advisory 06/2001 CERT CA2001-21 Advisory 07/2001 Compaq has evaluated this vulnerability to telnetd distributed for Compaq Tru64/UNIX and OpenVMS Operating Systems Software and has determined that telnetd is not vulnerable to unauthorized command execution or root compromise. Compaq appreciates your cooperation and patience. We regret any inconvenience applying this information may cause. As always, Compaq urges you to periodically review your system management and security procedures. Compaq will continue to review and enhance the security features of its products and work with customers to maintain and improve the security and integrity of their systems. To subscribe to automatically receive future NEW Security Advisories from the Compaq's Software Security Response Team via electronic mail, Use your browser select the URL http://www.support.compaq.com/patches/mailing-list.shtml Select "Security and Individual Notices" for immediate dispatch notifications directly to your mailbox. To report new Security Vulnerabilities, send mail to: security-ssrt@compaq.com (c) Copyright 2001 Compaq Computer Corporation. All rights reserved. - -----BEGIN PGP SIGNATURE----- Version: PGP 7.0.1 iQA/AwUBO2C5JjnTu2ckvbFuEQKmqwCg/m87d9k22+qV5GY2vJAR409KFD4AoIbR vsQaZ9DOI4D4sj5Feg4bRZmS =F5Nq - -----END PGP SIGNATURE----- - --------------------------END INCLUDED TEXT-------------------- You have received this e-mail bulletin as a result of your organisation's registration with AusCERT. The mailing list you are subscribed to is maintained within your organisation, so if you do not wish to continue receiving these bulletins you should contact your local IT manager. If you do not know who that is, please send an email to auscert@auscert.org.au and we will forward your request to the appropriate person. This security bulletin is provided as a service to AusCERT's members. As AusCERT did not write the document quoted above, AusCERT has had no control over its content. The decision to use any or all of this information is the responsibility of each user or organisation, and should be done so in accordance with site policies and procedures. NOTE: This is only the original release of the security bulletin. It may not be updated when updates to the original are made. If downloading at a later date, it is recommended that the bulletin is retrieved directly from the original authors to ensure that the information is still current. Contact information for the authors of the original document is included in the Security Bulletin above. If you have any questions or need further information, please contact them directly. Previous advisories and external security bulletins can be retrieved from: http://www.auscert.org.au/Information/advisories.html If you believe that your system has been compromised, contact AusCERT or your representative in FIRST (Forum of Incident Response and Security Teams). Internet Email: auscert@auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for emergencies. -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv Comment: ftp://ftp.auscert.org.au/pub/auscert/AUSCERT_PGP.key iQCVAwUBO31KQyh9+71yA2DNAQGr8gQAnCPgWWmjV4G/x4Z0yvJWOfpmDz5LxQqJ R3EOg4IJ05p7WYI5za6tOF9gotN+3+pfcuMp1OiMZI9P1yQXpOa8kG7qGkxBLNw0 diQtyk08T9ycM+7a0XPNAiF5YSGS7vDm+KnliWjm/litG6EsIEZQH0Tf94cvkm99 mLKWAdED4y8= =urLa -----END PGP SIGNATURE-----